Daniel Timiș
IT security as a foundation, not a reaction. · Iași, Romania · Remote RO/EU
L3 security engineer with 17 years of infrastructure behind every policy.
Zscaler ZIA/ZPA at L3 since 2024, built on ten years of IT work in Milan: service desk for Lombardy's regional healthcare system, then systems engineering for corporate clients. I build things that run quietly — and document them so they keep running.
Senior hands when your team needs them. A security foundation when your business doesn't have one.
Through my company, Administrator Computer S.R.L. (TiD iT®), I work with SMEs that want their security built properly, and with companies that need an experienced engineer on Zscaler, Windows infrastructure or Microsoft cloud.
ildvl@live.it · +40 758 353 665 · linkedin.com/in/daniel-timis-47b46593 · daniel.timis.website
Open to new roles
Roles I'm a fit for
- Security / SASE engineer (L3) — Zscaler ZIA/ZPA
- System engineer · senior system administrator
- L2 support with native Italian
How I can work
- Remote across Romania and the EU, or on-site in Iași
- Shifts, weekends and on-call accepted
- Driving licence B, own car
- Notice period negotiable
Work with me
For SMEs
A security foundation, sized for small teams
TiD iT's five-layer framework — network, devices, users, family, backup. Antivirus covers only one of the five; we cover all of them, with a clear monthly price. Build your offer online in a few minutes.
Get an offerFor companies · freelance / contractor
Senior hands on your infrastructure
Zscaler ZIA/ZPA (L3, tenant setup, policy reviews), Windows Server & Active Directory, Intune/Azure and PowerShell automation. Remote or on-site, invoiced by Administrator Computer S.R.L.
Ask for availabilityCase study
Five-layer security audit — consulting office, under 10 users
What I found
- No backup, or one that had never been tested
- Weak, shared passwords and no multi-factor authentication
- An unprotected network: ISP router defaults, guests on the same Wi-Fi
- Outdated devices: missing updates, expired antivirus
What I did
- Complete inventory of hardware, software and accounts
- A prioritised report: what is urgent, what can wait
- Fixed the urgent issues on the spot
Result
- Every layer documented, the biggest risks closed
- The client signed an ongoing security services contract
What I work with
Each card shows the highlights. Open “View details” to see what I've done at L1, L2 and L3.
Zscaler ZIA — Internet Access
6+ client tenants
- New tenants built from scratch
- Policy design: rule order, groups, departments
View details
L1 · Support
- Find why a URL is blocked (logs, Z-Insights)
- Simple URL / category exceptions
- Client Connector troubleshooting on the endpoint (status, re-auth, logout OTP)
- Location and tunnel health checks
L2 · Configuration & troubleshooting
- URL Filtering and Cloud App Control policies
- SSL inspection rules and bypass exceptions
- Cloud Firewall, DNS control and IPS
- DLP rules, sandbox reports and quarantined files
L3 · Architecture & escalation
- New tenants built from scratch
- Policy design: rule order, groups, departments
- SAML / SCIM integration with the identity provider
- Traffic forwarding: GRE / IPsec tunnels, PAC files, locations and sub-locations
- Migrations from legacy proxies; Zscaler TAC escalations and RCA
Zscaler ZPA — Private Access
200+ applications
- Connector group architecture across sites and cloud, high availability
- Device posture and conditional access
View details
L1 · Support
- Users who can't reach an app: policy and Client Connector checks
- App Connector status
- Client re-enrolment
L2 · Configuration & troubleshooting
- Application segments, segment groups and server groups
- Access policies on SCIM groups and SAML attributes
- App Connector deployment (VM, Linux, cloud)
- Forwarding and timeout policies
L3 · Architecture & escalation
- Connector group architecture across sites and cloud, high availability
- Device posture and conditional access
- Browser Access and Privileged Remote Access (RDP / SSH)
- VPN-to-ZPA migrations
Zscaler Client Connector & ZDX
Deployment · diagnostics · training
- Profile design per group and operating system
- Cloud path and ISP analysis
View details
L1 · Support
- Client Connector install / reinstall
- Log collection
- Reading a user's ZDX score
L2 · Configuration & troubleshooting
- App profiles, forwarding profiles, trusted networks
- Mass deployment via Intune, GPO or MSI
- ZDX deep traces
- ZDX alert investigation
L3 · Architecture & escalation
- Profile design per group and operating system
- Cloud path and ISP analysis
- Runbooks and knowledge base
- Training L1 / L2 colleagues
Windows Server & Active Directory
Environments of 1,000–10,000 users
- Domain controllers, FSMO roles, sites and replication
- OU design and delegation
View details
L1 · Support
- Password resets and account unlocks
- Users and groups
- Domain joins
- Printers
L2 · Configuration & troubleshooting
- Group Policy
- DNS and DHCP
- File servers and NTFS permissions
L3 · Architecture & escalation
- Domain controllers, FSMO roles, sites and replication
- OU design and delegation
- Version migrations (e.g. 2008 → 2016 / 2019)
- Hybrid identity and AD recovery
Networking (Cisco CCNA)
Cisco · Fortinet · MikroTik · Ubiquiti
- Routing
- Site-to-site VPN
View details
L1 · Support
- Cabling and patching
- Connectivity diagnostics (IP, ping, tracert)
- Wi-Fi client issues
- VoIP phones
L2 · Configuration & troubleshooting
- VLANs and switch configuration
- Access points
- Firewall rules, NAT, port forwarding
- Client VPN
L3 · Architecture & escalation
- Routing
- Site-to-site VPN
- LAN / WLAN design
- Packet analysis with Wireshark
Monitoring, virtualisation & backup
VMware vSphere / ESXi · Hyper-V · Xymon
- Monitoring design
- VMware / Hyper-V clusters
View details
L1 · Support
- Alert response
- Service and disk checks
- Backup job checks
L2 · Configuration & troubleshooting
- Xymon thresholds and tests
- Virtual machines and snapshots
- Restores from backup
- Managed cloud storage
L3 · Architecture & escalation
- Monitoring design
- VMware / Hyper-V clusters
- 3-2-1 backup strategy
- Disaster recovery tests
Microsoft Azure & Entra ID
~5 years
- Hybrid identity (on-prem AD + Entra ID)
- Cost management and governance
View details
L1 · Support
- Users and groups
- MFA resets
- Microsoft licensing
- Cloud password resets
L2 · Configuration & troubleshooting
- Conditional Access
- Virtual machines and storage
L3 · Architecture & escalation
- Hybrid identity (on-prem AD + Entra ID)
- Cost management and governance
Microsoft Intune
~3 years
- Compliance and configuration profiles
- Windows update rings
View details
L1 · Support
- Device enrolment
- Sync, wipe, retire
- Compliance status
- Company Portal apps
L2 · Configuration & troubleshooting
- Compliance and configuration profiles
- Windows update rings
- BitLocker
PowerShell automation
~10 years
- Scheduled automations
- Tools for clients: domain join, PC setup
View details
L1 · Support
- Running existing scripts
- Active Directory commands
- Exchange / Microsoft 365 commands
- Network and system diagnostics
L2 · Configuration & troubleshooting
- Bulk user operations
- Hardware and software inventory
- Maintenance scripts
L3 · Architecture & escalation
- Scheduled automations
- Tools for clients: domain join, PC setup
Microsoft 365
Exchange Online · SharePoint · Teams
- Exchange RBAC and application scopes (an app allowed to send from one address only)
View details
L1 · Support
- Mailboxes, passwords, licences
- Outlook issues
- OneDrive and Teams support
- New PC setup with Microsoft 365
L2 · Configuration & troubleshooting
- Shared mailboxes and permissions
- SharePoint and Teams administration
- SPF, DKIM, DMARC
L3 · Architecture & escalation
- Exchange RBAC and application scopes (an app allowed to send from one address only)
IT service management
ServiceNow · Remedy · Siebel · Jira SM
- Major incident handling
- Process improvement (incident, problem, change)
View details
L1 · Support
- Ticket logging and triage
- User communication
- Support in Italian
- Remote support
L2 · Configuration & troubleshooting
- Recurring problem tracking
- Knowledge base articles
- Vendor escalations
- Working to SLA
L3 · Architecture & escalation
- Major incident handling
- Process improvement (incident, problem, change)
Security consulting & web (TiD iT®)
Own company since 2025
- Five-layer security audits (network, devices, users, family, backup)
- IT infrastructure inventories
View details
For clients
- Five-layer security audits (network, devices, users, family, backup)
- IT infrastructure inventories
- Commercial offers and IT service contracts
Own projects
- Cloudflare DNS and Workers
- Web security headers and security.txt
- Entra ID app sending mail via Microsoft Graph, locked down with Exchange RBAC
- Security talks and trainings for entrepreneurs
Experience
Zscaler L3 Security Engineer — SASE · Getronics
L3 escalation for Zscaler ZIA/ZPA in a SASE cloud architecture — access policies, troubleshooting and root cause for clients worldwide.
Systems Engineer · Getronics
IT operations for Getronics customers worldwide: monitoring (Xymon) of hardware, software, network, managed cloud storage and virtualisation; root-cause work with other teams.
Founder & administrator · Administrator Computer S.R.L. (TiD iT®)
IT security consultancy for entrepreneurs, SMEs and families, built on a five-layer framework: network, devices, users, family, backup.
System Administrator · ALTEN Delivery Center Romania
Business-critical IT operations: servers, users and groups, permissions, group policies, event-log review and monitoring; LAN/WAN, SharePoint and end-user infrastructure.
Junior System Administrator · AlmavivA
Three domain controllers (Active Directory, Group Policy, OUs); LAN, WAN and VoIP support; application systems for TIM, Vodafone and Wind; smart-working devices.
Senior Help Desk Technician · HCL Technologies
1st/2nd level technical support for Xerox — troubleshooting, monitoring and validation in a complex technical environment.
System Engineer · ITD Solutions S.p.A.
Corporate clients: Windows clients and Server 2008, users and permissions, software deployment, log review, procedure-driven changes and service-quality audits.
IT Helpdesk — Service Desk L1/L2 · Olisistem ITQ S.p.A.
Service desk for SISS, Lombardy's regional healthcare IT system — incidents that can't wait until tomorrow. Incident, problem and change process improvement; Remedy and Siebel.
Computer Technician (on-call) · Snap-on
On-call installation of Techdoc 3 diagnostic systems and dedicated wireless access points; PC optimisation, imaging, backup and configuration.
Certifications & training
Certification
- Cisco Certified Network Associate (CCNA)
Training courses (no exam)
- Zscaler
- Microsoft
- ITIL Foundation
- CompTIA A+ · Network+ · Security+
Languages
- Romanian — native
- Italian — native
- English — professional working
Beyond infrastructure
Since 2025 I'm also an Education Mentor at Dalia's Book in Iași. Different field, same habit: finding a clear path through something complicated — whether it's a system or a hard-to-explain subject.
I'd rather build something that runs quietly than something that impresses and then fails.